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REIVIARKS/ARGUIVIENTS 

Claims 2 and 3 have been cancelled, claims 1 and 4-10 remain in 
prosecution. Independent claims 1 , 5 and 8 have been amended. 

Claims 1, 2, 6 and 6 were rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hardjono (U.S. Pat. No. 6.182.214) in view of Bellare et al. 
(Proposal for PI 363 Study Group on Password-Based Authenticated-Key- 
Exchange Methods). Claim 3 was rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hardjono In view of Newton (U.S. Pat. No. 5,771 ,291). Claims 
4 and 7 were rejected under 35 U.S.C, 103(a) as being unpatentable over 
Hardjono in view of Denning (Descriptions of Key Escrow Systems). 

Independent claims 1, 5 and 8 have been amended to further clarify the 
present invention in view of the cited references. 

As currently amended, claims 1 and 4 cunentiy recite a server including a 
key repository process and a database for storing sensitive information, the 
integrity of the database is maintained by an integrity key and the sensitive 
infonnation is managed by the key repository process, the key repository process 
also valkJates and records authorizations of applications to access the sensitive 
information. Furthemiore. the master key Is reassembled using the key 
repository process. Neither the cited Hardjono or Bellare taken individually or in 
combination teach or suggest such a key repository process or database as 
currently recited. A^s such, claims 1 and 4 are believed to be in condition for 
allowance. 

Claims 5-7 now recite using a key repository process for managing the 
sensitive information in the database, the key repository process using an 
integrity key to maintain the integrity of the database and the master key can be 
reassembled by the key repository process by requiring only some of the 
passwords to be revealed. The cited references all fail to teach a key repository 
process and database (see FIG. 1 and conesponding discussion) as now recited 
and as such, claims 5-7 are believed to be in condition for allowance. 

Claims 8-10 also now recite a key repository process for managing 
infonnation In the storage area using an integrity key for protecting the integrity of 
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the storage area and the master key for protecting sensitive Information In the 
database. As above, none of the cited references teach or suggest such a Itey 
repository process. Given this, claims 8-10 are. believed to be in condition for 
allowance. 

Applicants respectfully request reconsideration and allowance of the 
pending claims. If the Examiner feels that a telephone conference would 
expedite the resolution of this case, he Is respectfully requested to contact the 
undersigned. 

In the course of the foregoing discussions. Applicants may have at times 
referred to claim limitations in shorthand fashion, or may have focused on a 
particular claim element. This discussion should not be interpreted to mean that 
the other limitations can be ignored or dismissed. The claims must be viewed as 
a whole, and each limitation of the claims must be considered when detemriining 
the patentability of the claims. Moreover, it should be understood that there may 
be other distinctions between the claims and the cited art which have yet to be 
raised, but which may be raised in the future. 

Applicants respectfully request reconsideration and that a timely Notice of 
Allowance be issued in this case. It is believed that no extensions of time or fees 
are required, beyond those that may otherwise be provided for in documents 
accompanying this paper. However, in the event that additional extensions of 
time are necessary to allow consideration of this paper, such extensions are 
hereby petitioned under 37 C.F.R. § 1.136(a). and any fees required (including 
fees for net addition of claims) are hereby authorized to be charged to Hewlett^ 
Packard Development Company's Deposit Account No. 08-2025. 

Respectfully submitted. 
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